Changelog

8 September 2026

Fix: saving a note no longer ends in a "404 Invalid controller class: adminnotes" error. The save button used the reserved `task` field with a dot in the value, which Joomla reads as a controller name for the component the page belongs to. The module now uses its own field name
Security: the Custom CSS setting is checked before it is placed in the page, so it can no longer close the style block and run script on the administrator pages that show it. Changing that setting needs access to the options, which is not necessarily a Super User
Change: the "Edit users" option now accepts multiple users instead of a single one, matching the user groups option and the option description
Language: the "not authorised" message was missing in German, French and Italian and is now translated in all six languages

1 September 2026

Security: saving a note now only reacts to the module its own save button, so a form elsewhere on the same page can no longer overwrite your note with an empty one
Security: when no user groups or users are configured, editing is now limited to Super Users instead of open to everyone with backend access
Security: the helper plugin for update logging is only installed when the update server supplies a valid checksum for it, and only from the Joomill update server

1 August 2026

Change: PHP file headers updated to the standard Joomla docblock copyright format; code style only, no functional changes
Change: full code style pass against the Joomla CMS phpcs ruleset (PSR-12): phpcbf auto-fixes for indentation, line endings, brace placement and whitespace, plus phpcs annotations for deliberate exceptions (`_JEXEC` guards, legacy global class names, legacy API naming). Code style only, no functional changes
Language: es-ES language (thanks to Andrés Restrepo | alamarte.com)

8 July 2026

Addition: Downloads from the Joomill update server now include diagnostic request headers with site and environment information

2 July 2026

2 June 2026

Security: Notes saved by users without Super User permissions are now filtered, preventing malicious code from being stored in a note.
Security: Edit permissions are now also verified during the save itself, no longer in the display layer only.
Security: Super User access is now determined correctly through Joomla's ACL instead of a fixed group number, so it is accurate on every site.
Change: The module has been fully revised to meet Joomla 6 standards
Fix: Various internal cleanup and text corrections.

24 August 2025

9 July 2025

Fix: Remove redundant inputfilter logic from default.php and AdminnotesHelper.php

26 June 2025

Fix: Clear cache on Save
Addition: Buy Me a Coffee widget in module settings
Addition: Error Handling
Security: Enhance validation, rate limiting, and security in Adminnotes module
Change: Small code changes & documentation
Change: Reformat Code
Language: Update Languagestrings
Remove: duplicate closing `</i>` tags in (un)install messages

3 March 2025

5 December 2024

Documentation: Admin Notes